Senior Security Analyst

Support the secure and reliable operation of the Group's cybersecurity platforms, with primary focus on privileged access management, email security, vulnerability management and security operations.
The role coordinates security projects, platform changes, system troubleshooting and service providers to maintain effective security controls across cloud and on-premises environments.

• Administer, maintain and continuously improve enterprise security platforms, including privileged access management (PAM), email security and vulnerability management solutions.
• Manage privileged account onboarding, access provisioning, Safe and role assignment, service and vendor accounts, periodic access reviews, and follow-up on expired or exceptional access.
• Support Microsoft 365 and email security controls, including mail flow security, transport rules, connectors, journaling and security exceptions.
• Coordinate vulnerability assessments, penetration tests, configuration hardening reviews and remediation follow-up across cloud, on-premises systems, networks and applications.
• Participate in cybersecurity projects from requirements definition and solution evaluation through implementation, testing, acceptance and transition to operations.
• Prepare technical requirements, scopes of work, evaluation criteria, technical assessments, procurement justifications and management approval documents for cybersecurity products and services.
• Manage security vendors and service providers, monitor service performance and deliverables, and coordinate incident resolution, platform support and enhancement activities.
• Maintain security procedures, platform records, risk assessments, incident records, audit evidence and operational documentation.

• Bachelor's degree in Information Security, Computer Science, Information Technology or a related discipline.

Experience & Skills

• Minimum 5 years of relevant experience in cybersecurity operations, security platform administration or infrastructure security.
• Hands-on experience in privileged access management is required; experience with CyberArk or other enterprise PAM solutions is preferred.
• Practical knowledge of Microsoft 365 or enterprise email security, including mail flow controls, transport rules, connectors or security gateways.
• Experience with vulnerability management, security assessment and remediation coordination.
• Experience in security solution implementation, migration, testing, operational acceptance and vendor management.
• Knowledge of identity and access management, cloud security and network security.
• Experience in preparing technical requirements, vendor evaluations, procurement documentation and management submissions is preferred.
• Ability to analyze security platform issues, coordinate troubleshooting and work effectively with internal teams and external service providers.
• Basic scripting or automation knowledge for security administration and operational improvement is an advantage.
• Relevant professional certification such as CISSP, CISM, CISA, Security+, CyberArk certification or equivalent is preferred.
• Self-motivated, responsible, organized and able to manage multiple priorities and operational issues.
• Good command of written and spoken English and Chinese.